From: CCIE Study (studyccie@xxxxxxxxxxx)
Date: Sat Jan 05 2002 - 19:29:39 GMT-3
"By default, Cisco routers bridge IPX traffic. To change this behavior, you
must configure ipx routing on the router. IPX, using 802.2 encapsulation,
uses SAP 0xE0 as the DSAP and SSAP. Therefore, if a Cisco router is bridging
IPX and the requirement is to permit only this type of traffic, use this
ACL:
access-list 200 permit 0xE0E0 0x0101"
http://www.cisco.com/warp/public/698/acl200.html
Is this a misprint? Should it be 0xE0E0 0x0000?? It doesn't mention whether
or not E1 is a response. In the above paragraphs, it does mention that
NetBIOS has response F1, and that SNA has response too.
Thx
>From: "cc13" <cc13@attbroadband.com>
>Reply-To: "cc13" <cc13@attbroadband.com>
>To: "CCIE Study" <studyccie@hotmail.com>, <ccielab@groupstudy.com>
>Subject: RE: ******Last minute review******
>Date: Sat, 5 Jan 2002 17:13:58 -0500
>
>I think the ipx SNA should be 0xE0E0 0x0000. For your filters you want to
>put them on dlsw peer statements when you are filtering between dlsw peers.
>I know this sounds simplistic but I don't know how to explain it any
>better.
>I hope it helps.
>
>Good luck and let us know how you do!
>
>Chris
>
>
>
>-----Original Message-----
>From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
>CCIE Study
>Sent: Saturday, January 05, 2002 4:36 PM
>To: ccielab@groupstudy.com
>Subject: ******Last minute review******
>
>
>It's finally that time. I'm sitting in a hotel in RTP and counting the
>minutes until tomorrow morning. It's time for last minute review, and for
>a
>few last minute questions.
>
>I think the CCIE practical studies book is wrong about SNA filters. I
>think
>they are:
>
>SNA: 0x0000 0x0D0D
>IPX: 0xE0E0 0x0101
>NetBIOS: 0xF0F0 0x0101
>
>Correct?
>
>Now, DLSw+ icanreach.
>
>If you say, 'dlsw icanreach saps F0', do you also have to say 'dlsw
>icanreach saps F1' ? Same for E0 & E1?
>
>Also, how are you supposed to know where to put your filters? When do you
>put the filter on the DLSw statement, and when do you put them on the token
>interface?
>
>
>Other than that, I feel good. This is my first (and hopefully only)
>attempt. I'd like to thank all the people who have contributed to the
>group, it's been a great resource.
>
>Wish me luck.
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:56:17 GMT-3